Skip to content

fix: patch vulnerabilities and bump outdated dependencies - #7577

Open
waldekmastykarz wants to merge 3 commits into
pnp:mainfrom
waldekmastykarz:waldekmastykarz-weekly-deps-bump-241
Open

fix: patch vulnerabilities and bump outdated dependencies#7577
waldekmastykarz wants to merge 3 commits into
pnp:mainfrom
waldekmastykarz:waldekmastykarz-weekly-deps-bump-241

Conversation

@waldekmastykarz

Copy link
Copy Markdown
Member

Dependency Patch Summary

Vulnerabilities fixed: 32 → 0 🎉

Direct dependencies updated

Package Old New
@azure/msal-common 16.11.3 16.14.0
@azure/msal-node 5.4.3 5.6.0
@inquirer/confirm 6.1.1 6.3.0
@inquirer/input 5.1.2 5.1.4
@inquirer/select 5.2.1 5.2.3
@types/semver 7.7.1 7.8.0
@typescript-eslint/eslint-plugin 8.65.0 8.68.0
@typescript-eslint/parser 8.66.0 8.68.0
@xmldom/xmldom 0.9.10 0.9.12
applicationinsights 3.15.1 3.16.0
axios 1.19.0 1.20.0
csv-stringify 6.8.1 6.8.3
eslint 10.8.0 10.9.1
globals 17.8.0 17.11.0
mocha 11.7.6 11.8.0
open 11.0.0 11.0.2
uuid 14.0.1 14.0.2
zod 4.4.3 4.5.4

Overrides updated

Package Old New Notes
fast-xml-parser 5.8.0 5.11.1 via adaptive-expressions
protobufjs 7.6.0 7.6.6 3 overrides + top-level
serialize-javascript 7.0.5 7.1.1 via mocha
@opentelemetry/sdk-node 0.218.0 0.221.0 via @azure/monitor-opentelemetry
@opentelemetry/exporter-prometheus 0.218.0 0.221.0 via @azure/monitor-opentelemetry

Code changes

  • Fixed src/utils/zod.ts for zod 4.5.4 type change (JSONSchema.type can now be SchemaType | SchemaType[])
  • Added src/utils/fsUtil.spec.ts for 100% code coverage

Not auto-applied (major version bumps)

  • @azure/msal-node 6.0.0 available (currently on ^5.6.0)
  • csv-parse 7.0.2 available (currently on ^6.2.1)
  • typescript 7.0.2 available (currently on ~5.9.3)
  • protobufjs 8.8.0 available (overrides pin to 7.x)
  • diff 9.0.0 available (override pins to 8.x)
  • swiper 14.2.0 available (override pins to 12.x)

Remaining vulnerabilities: 0 🎉

All 16,100 tests pass with 100% code coverage.

Supersedes #7556.

waldekmastykarz and others added 2 commits September 7, 2026 09:10
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@milanholemans

Copy link
Copy Markdown
Contributor

@waldekmastykarz this PR has merge conflicts, can you resolve them?

@milanholemans
milanholemans marked this pull request as draft September 7, 2026 20:48
@waldekmastykarz
waldekmastykarz marked this pull request as ready for review September 9, 2026 07:02
…kly-deps-bump-241

# Conflicts:
#	npm-shrinkwrap.json
#	package.json
#	src/utils/fsUtil.spec.ts
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants